Analysis

  • max time kernel
    18s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    10/01/2025, 02:31

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4321

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    4bb150a6eed2dbd3cb5fcaccd34dd8bf

    SHA1

    92387041f35f8acc49227a0a23ab9c98ad1f0849

    SHA256

    8ca076757f5a9ade6f054c28a0ad9a5ec939febd8f7b31ff47926a46190dcc59

    SHA512

    f09b3b6c090cee0a82b30b19128d2094bd74cc29b42d0a5194fba1b296947f8eb07727721449e54a8770c4346f9aefa3417002a3db012f0b4ea5084e2d5d146f

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    f2e6c9e9fb72a6b8e541746998eed07e

    SHA1

    90f36e36e33984fe3dd2a0c13f785c0a15425251

    SHA256

    db37d2400442b7998f2b93d81df6e1b6b9de2b574b0b8c7533258ea481b1e08d

    SHA512

    d6b2d1270da1cfaee21ddf6f301d6472ebfdb50fbe75fbd1c57d8c2a4d4d469d51a7cedfc4e01e75faf1d532530d3091a7b4947a97f40a2ae75d6690b9247de5

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    e0d3d2b7cd6286be7f5e645c2486e916

    SHA1

    a4876236b0c4c871a5537c971538b4a2561d5d65

    SHA256

    a59d6df0437b170dba2e34633bb641afac583e59c6ad8a2e313880b2819e6e56

    SHA512

    eee26754cc0c626aaf84106590fbd091877d84d550fca44dd3cb641502c663569735660216da03c510b7e7e7339e1e22e682741c9f8ca5ecb75dff93132c0ccb

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    686d48a58ed70916923a359f6c1ddc4d

    SHA1

    fe7ec67c6c80cc2d2d2f8c8dea07034e4e6d1a6a

    SHA256

    de657c46b626771b8fc306568640a138d67bc8ece5b3d2c2e288ad4465fb6043

    SHA512

    8cfc64604f10d20b96dbe5011b89dac2ef39150a160a6740ffb66d1272fef15d4e8a048d5ea3e52286081af2ad93e3005a07f517ac32fdacdb562f5bf11f867f

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a4f02d5b82ca5d9dda9346ea7431a1ca

    SHA1

    bf170d1fff909bd72b4aba5e2f7ca46132930674

    SHA256

    fabca184ff56ad7d20653ac59c8627f736f79b001b6929b35d90b7f941a08801

    SHA512

    d52bc4929406cce548f6f80a2db7a63da5707dfd4385e216364af49963860c4610b16d60121405cbf118c42e6ef6e103d088906beaccd828314ad8ff7ed57878

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    07bf5eb37089e4c542703f1a6fedc800

    SHA1

    6ead29ea87473e8299d60e92be8adfd69c4903fa

    SHA256

    b3ff68334363b77ac07afa64fe24ad862d79ff1a81002ba60b62041b478161d0

    SHA512

    fd2a2c515e0b48faf9cf59d57c9201d705ba5a3179bd99bde83a8bd3809295a7895df3f8c9eaa4b0e1a68709c74ca3717f7c8b89f72ac6a9daa38a1325c2c6aa

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e5679e9528b6416b98e1b944a2291537

    SHA1

    f989ed7449853e4ed8b125dcf2e1e7b9706dea6b

    SHA256

    38424941c70efced21226f3f1a6a1c0e873c2e3e1dd6a8ef4363dda5954f2818

    SHA512

    70188ed195a0903f1bf10ffab5644d40902ffd1535c192d09cc7c39bcf080b81eac82b16e4905b31f9ecc72b10e26bfc9e74b0262bdb6a650cdc6723ddd4db94

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    24cc9f71c520529099ba118e36fb31a3

    SHA1

    13ea7b7fae501f96eab6fa2d12531ede87f99a55

    SHA256

    e19164ca2e61bfb2131f939b5d206ac63bbef43469c6d49a9cb4952cd878bfa2

    SHA512

    74f6a8c50653d982b443a1910ad2ad5d8d9cc7c59ba9521f3b3c5e90084eaab322557e80ea64351ab3df87d598a63a31bbe7215e1c801d3962c0b0f43a0566ea

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    f8d7f328a568364159f1b99cdb855593

    SHA1

    c509bee184db8e1d10119df041658bbc403f1a4d

    SHA256

    8f0536ca18ef9062b25acb90cee425ae8b0a7811af52d42feb46276a4df21033

    SHA512

    de8cf017a3cd9f5cc7a86dd39b9539fe6f427ac12bfbaeb473f7640be15ed55b6cbd8426da2f20ae0200ca0b4fbc646f9dff1d2079184edc96dd496d14c10b06

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    472a73deaaf69ede36c0b436bf2cefad

    SHA1

    d712198b3584c3f6cc1ccc8cc882412dc3b7c753

    SHA256

    4adb64a02556a24c5770a34e8b4531f617b72b4f0b946d21afc592b8688a9985

    SHA512

    7cf57390c0526cc3212e882b160432a49a4e9d5fac89dcfeca43d634a7f2d76b42cf6ff2cd0590242d99893b26a62db7d0cb6642f9c299ddd6754131b5738f09

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    0c0705b00af67c41c38c02a15bbade4e

    SHA1

    3a4f507efaec5610f2c986b23bdd59c5c9dfb75a

    SHA256

    938697f413b5a8f1964e10708d01962c39923461ff8ae9e43103b8eb668cf948

    SHA512

    13850d0b3a86f61f8caffa309793202ad3ac64a16c3f66f0cc7f25df18c08c09aa427b8a42530dad7d6d1a52120bc9f31e92351626fa929eb1e316fe8e1ff146

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    879d71c0e156af168960a6451da95e4f

    SHA1

    38baa42ab664912357a09ea5833d3e7f81fd2b01

    SHA256

    a4bed67e37f76b2e00a41f2c58179c276d264034654d2c976f15feb3be3b149d

    SHA512

    657808b050471ef392c2cb6f46b5d64356d466420381ff5075dfde1c9ec44fbb79e53beb961238cfc382915585b851cf502c3f07d7e0b95bc5e490ebef3ccc76

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    37ce0feca6f9337e7abbf0628b8b5653

    SHA1

    cbabadb8ae5b9649c7b40effbaa1be44f1da121a

    SHA256

    a4a9bc55f23a0ec88b3ead59a96183922c02ec08f2eae6f97c1cb2864a9f7712

    SHA512

    29c179453d3a2e46528f640fe615c025abc243415ce8ab8b8be810c75b718a3bffdeed062b167f00d0895e35c69ea3e6a25cbf62c4b86c1c6b4e7004435a972d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e0185baafcc93eaca125801642abc703

    SHA1

    b2007c8b345d1eb52b218632c03762f8267b652d

    SHA256

    e7ab5a5b19fe1a1d7e389dc487489cfc45ed6a55ad9c36bcf7823b396fef6b16

    SHA512

    040ddcef4e51540f1df933dd211dd285c24e9fc68607ab5ab22bdfe5c84ea5e103805aa8381beb7b93edd5825667eb4b9be3695dd571c5cdd47671c8e441eb50

  • /data/data/com.systemservice/files/PersistedInstallation5312784228800351386tmp

    Filesize

    90B

    MD5

    ea943d03bda4b587e330de87b4169ed2

    SHA1

    e1cbbb8906ddaf258558bbe336d199b8b86c5f67

    SHA256

    11196220f5b8ce1fecdab12ea1253db34eb3dd2acc9e1a3a455c445b7958661c

    SHA512

    fea7a5c15ec8c9aa2fbc8e57fb294348ada7bfbedf7af98cfad47ced7bc65e595bbb4d2e467b1d81fef3be73ff8c748d911cb57378ddf99e9bf5dd4e168644aa

  • /data/data/com.systemservice/files/PersistedInstallation695279984771131133tmp

    Filesize

    556B

    MD5

    c8215a40af199087203cdd7d87359b64

    SHA1

    4e0261cad39a7f6de280109f11b5fafe26aa29f7

    SHA256

    d58f31125c1ad0842bf4ba315d415c20d5377a220d9302aa7866c2904e8e3c18

    SHA512

    e93e11c6e0aec73f0f65afc6b9631fa3bca89ffaa1ff4d6deee09a76a95e04083b9ed51f1c2b31b3a52d8f9d398ab89097d1b6b970a0c9f7a2b8336d5432d850

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    a3b8da82aec4c02c8ec03157f8b63f64

    SHA1

    17e3ddfbfe3af9c7398c37671e066f4539fff8b7

    SHA256

    88c864da3e8118a53f63b9d93ef87515118d14824b3666e99e0441eef77a21ff

    SHA512

    f6aca988af9697424250dd9859627e48d34bc76611f42dba4349e2d90862b677d9e533bcbc81295293ec127159c31fef63a3f9ab3fc33bd828eb6eaa16a5882c